Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/2248?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2248?format=api", "vulnerability_id": "VCID-fr32-1m9n-c7ed", "summary": "Security researcher vsemozhetbyt reported that when the\nDOMParser is used to parse text/html data in a Firefox extension, linked\nresources within this HTML data will be loaded. If the data being parsed in the\nextension is untrusted, it could lead to information leakage and can\npotentially be combined with other attacks to become exploitable.", "aliases": [ { "alias": "CVE-2012-3975" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1025?format=api", "purl": "pkg:mozilla/Firefox@15.0.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@15.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/1029?format=api", "purl": "pkg:mozilla/SeaMonkey@2.12.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/SeaMonkey@2.12.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/1027?format=api", "purl": "pkg:mozilla/Thunderbird@15.0.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Thunderbird@15.0.0" } ], "affected_packages": [], "references": [ { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3975", "reference_id": "CVE-2012-3975", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3975" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2012-68", "reference_id": "mfsa2012-68", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2012-68" } ], "weaknesses": [], "exploits": [], "severity_range_score": null, "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fr32-1m9n-c7ed" }